Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/eB1ec_PQXEhs09JotqrJhbmTxTc.roa
File: eB1ec_PQXEhs09JotqrJhbmTxTc.roa (raw, json)
Hash identifier: zUL/VKgAIy2QCwR2jpoDGVlQGV1FU1hJj6ne2vzk7vU=
Subject key identifier: 78:1D:5E:73:F3:D0:5C:48:6C:D3:D2:68:B6:AA:C9:85:B9:93:C5:37
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01856DDD22AF33A000672248C3B6FB63F0D6
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/eB1ec_PQXEhs09JotqrJhbmTxTc.roa
Signing time: Sun 01 Jan 2023 15:04:46 +0000
ROA not before: Sun 01 Jan 2023 15:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60975
IP address blocks: 185.19.185.0/24 maxlen: 24
185.19.184.0/24 maxlen: 24
185.19.187.0/24 maxlen: 24
2a00:43e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:22:af:33:a0:00:67:22:48:c3:b6:fb:63:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Jan 1 15:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=781d5e73f3d05c486cd3d268b6aac985b993c537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:64:36:a0:32:34:16:78:89:a6:3a:0e:e5:ed:
c9:c1:96:65:da:ac:b3:17:f4:d1:46:25:65:50:62:
8b:4b:13:02:40:51:17:e0:42:02:01:37:7c:52:b7:
a8:8f:2a:db:8c:c4:c2:19:cf:a6:c8:49:82:45:71:
9e:2a:87:e4:4d:94:ac:56:ff:e6:3b:fa:a5:81:50:
3a:84:d7:dd:66:de:22:ed:81:76:82:58:b0:11:15:
74:21:c4:47:07:c9:de:6f:d3:c5:e1:66:76:aa:68:
fe:3e:9b:1f:2e:e8:ff:c5:78:c2:d8:e1:9a:ed:d1:
be:1c:a3:af:ea:02:40:1a:55:44:00:59:a5:e8:c3:
02:21:20:7c:47:43:a0:02:bd:6c:73:d7:00:f3:ae:
c1:68:e1:0a:47:22:59:20:18:a1:c2:35:e7:b0:87:
f8:c8:58:4b:6c:0f:52:8d:02:3c:5d:81:15:eb:57:
11:35:48:6f:9b:c8:80:73:c8:a7:c3:ee:6e:d9:4f:
3f:f4:1d:f4:0a:33:c5:8a:7a:3f:06:eb:3d:ad:36:
ec:6a:90:07:8a:28:08:e9:73:9d:5f:c2:5f:b4:e6:
51:0d:e0:cd:11:4d:37:2e:7d:3f:26:92:9c:06:c5:
56:8e:7c:0b:6e:28:7c:11:4c:5c:49:dc:20:f2:d5:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:5E:73:F3:D0:5C:48:6C:D3:D2:68:B6:AA:C9:85:B9:93:C5:37
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/eB1ec_PQXEhs09JotqrJhbmTxTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.184.0/23
185.19.187.0/24
IPv6:
2a00:43e0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:bf:5b:79:66:da:fb:50:6e:57:18:b7:d5:af:1f:ae:50:aa:
ac:33:73:cc:24:e5:34:9c:8c:c3:3f:23:a4:be:25:54:70:4f:
6d:b7:1b:dd:ff:fd:53:20:59:60:b7:c1:08:6f:e3:dd:ee:d0:
09:44:7f:96:2a:30:43:8e:af:62:f6:60:50:5a:8c:97:ce:ac:
71:6f:1d:15:9f:ad:0e:26:a6:f5:2a:0c:8b:68:39:6c:0b:bf:
7b:1e:bb:80:44:9f:11:47:94:f5:a0:69:46:2b:02:19:89:bd:
b6:c8:11:f5:0b:a5:dd:40:4b:fe:73:08:af:5d:9b:f6:a8:da:
46:ee:f5:4a:56:20:30:c9:00:db:f1:36:d5:aa:27:2b:a4:55:
5f:20:a7:37:1f:21:ad:ed:aa:75:e5:0d:73:59:91:9e:b9:36:
3e:4a:b8:f3:63:91:43:c3:d6:ee:9f:25:47:19:f2:a0:f1:a6:
90:61:7d:ad:7a:db:3a:ed:16:67:78:89:00:f6:17:97:1b:8f:
88:a8:b7:24:cb:17:02:dd:26:53:b1:4c:45:f9:d0:46:f0:25:
b9:4e:84:17:d9:7b:d7:24:99:24:d2:25:67:6b:df:1c:3b:62:
a2:ac:04:94:5e:13:af:ed:a6:fd:74:f8:f4:b9:79:e5:9c:f2:
d8:f1:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:39 2024 by rpki-client on console-fra.rpki-client.org